Data Protection
Introduction
Luton Sixth Form College is committed to protecting the personal data it holds and to processing that information in line with the six data protection principles set out in the UK General Data Protection Regulation (UK GDPR). This ensures that all personal data is processed fairly, lawfully and transparently, and that the rights of individuals are respected and upheld.
The College's ICO Registration number is Z5209633 ICO’s website for registration details
How We Use Your Information
For Students:
Most of the data we collect and process is used to provide education and welfare services, which form a necessary part of the agreement you make with us when you enrol. This includes the provision of on-site and remote (offsite) learning and support.
For Staff:
Most of the data we collect and process is used to provide employment and welfare services, which are a necessary part of the agreement you make with us when you sign your contract of employment.
Our Legal Basis for Processing Your Data
Data protection law requires the College to identify a lawful basis for processing personal data. Luton Sixth Form College only processes personal data where it is necessary and lawful to do so. In most cases, processing is required to provide education, employment services, and to meet our statutory responsibilities.
The lawful bases we rely on include:
Contract: Core data is processed to provide the services agreed when you enrol or sign your employment contract.
Legal Obligation: Some personal data must be processed to comply with legal and regulatory duties. This includes sharing required information with government departments and funding bodies, such as the Department for Education, examining bodies, and regulatory authorities.
Vital Interests: In limited circumstances, the college may process personal data to protect your vital interests or those of another person. This may include medical, safeguarding or emergency information where there is a serious risk to health or safety.
Consent: Where personal data is not required for contractual, legal, or vital interests purposes, the College may rely on consent. Where this applies, consent will be clear and specific, and you have the right to withdraw it at any time.
We only collect and process data that is relevant, necessary and proportionate, and we handle all information securely in accordance with data protection legislation and College policies.
If you have any queries, or would like to make a Freedom of Information Request or Data Subject Access Request, you can contact the Data Protection Officer via email: dataprotectionLSF@lutonsfc.ac.uk